Skip to main content

💼 SA-4(2) Acquisition Process | Design and Implementation Information for Controls

  • Contextual name: 💼 SA-4(2) Acquisition Process | Design and Implementation Information for Controls
  • ID: /frameworks/nist-sp-800-53-r5/sa/04/02
  • Located in: 💼 SA-4 Acquisition Process

Description​

Require the developer of the system, system component, or system service to provide design and implementation information for the controls that includes: [Selection (one or more): security-relevant external system interfaces; high-level design; low-level design; source code or hardware schematics; [Assignment: organization-defined design and implementation information]] at [Assignment: organization-defined level of detail].

Similar​

  • Internal
    • ID: dec-c-0b2d4d7d

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 FedRAMP High Security Controls → 💼 SA-4(2) Design and Implementation Information for Controls (M)(H)

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags